CVE-2015-8286

Name: CVE-2015-8286
Creator: NVD / NIST
Published: 2016-02-18T05:59:00.2+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 4.56%

Last modified Jun 17, 2026

CVE-2015-8286 is a vulnerability of currently unknown severity. Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.. EPSS estimates a 4.56% chance of exploitation in the next 30 days.

Description

Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.

Metrics

EPSS Probability

4.56%

90.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-254

Affected Software

Vendor	Product	Versions
Zhuhai	Raysharp Firmware	All versions

References

http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.htmlExploit
http://seclists.org/bugtraq/2015/Jun/117Exploit
http://www.forbes.com/sites/andygreenberg/2013/01/28/more-than-a-dozen-brands-of-security-camera-systems-vulnerable-to-hacker-hijacking/
http://www.kb.cert.org/vuls/id/899080Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/923388Third Party Advisory, US Government Resource
https://community.rapid7.com/community/metasploit/blog/2013/01/23/ray-sharp-cctv-dvr-password-retrieval-remote-root
http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.htmlExploit
http://seclists.org/bugtraq/2015/Jun/117Exploit
http://www.forbes.com/sites/andygreenberg/2013/01/28/more-than-a-dozen-brands-of-security-camera-systems-vulnerable-to-hacker-hijacking/
http://www.kb.cert.org/vuls/id/899080Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/923388Third Party Advisory, US Government Resource
https://community.rapid7.com/community/metasploit/blog/2013/01/23/ray-sharp-cctv-dvr-password-retrieval-remote-root

Timeline

Published: Feb 18, 2016
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2015-8286?

Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.

How severe is CVE-2015-8286?

Severity scoring for CVE-2015-8286 is pending analysis. The EPSS model estimates a 4.56% probability of exploitation in the next 30 days.

How do I fix CVE-2015-8286?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-8286?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST